Privacy Policy
Date of publication: 31 July 2024
This privacy policy (“Privacy Policy”) seeks to explain how ZEBRA BI d.d. and its affiliates (“ZEBRA”, “Company”, “Controller”, “we”, “us”, “our”) use the data you give us through www.zebrabi.com and www.zebra-ai.com (“Websites”), Zebra BI for Power BI Custom Visual – Published (“Custom Visual”) on Microsoft AppSource or Privately distributed and Zebra AI application (“Application”). Your use of the Websites, Custom Visual, Application or any submission of any personal information by you to the Websites, Custom Visual or Application (directly or indirectly) means that you confirm that you are aware that we may use that data submitted by you in accordance with this Privacy Policy.
At ZEBRA BI d.d., we are aware of the importance of personal data protection. As the controller of personal data, we handle the collected personal data responsibly and in accordance with the applicable regulations in the field of personal data protection, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation”, “GDPR”), other applicable regulations on the protection of personal data and our internal acts. In order to implement the principle of fair and transparent processing, we have prepared this Personal Data Protection Policy (“Privacy Policy”), which enables individuals to obtain all relevant information relating to their personal data when using our website https://zebrabi.com/ or https://zebra-ai.com.
- Owner and controller
The “provider”, “website owner”, “Custom Visual owner”, “Zebra AI owner” and “personal data controller” (jointly the “Controller”) of https://zebrabi.com/ and https://zebra-ai.com as defined by the GDPR and other applicable regulations on the protection of personal data is:
Company: ZEBRA BI informacijske rešitve d.d.
Registered seat: Pot za Brdom 104, 1000 Ljubljana, Slovenia
Company ID: 6629997000
VAT ID: SI 35190108
The seat of incorporation: Republic of Slovenia
- Contact for personal data protection
For all questions and assistance in exercising the rights of individuals, we have appointed a contact center for personal data protection that can be reached via the e-mail address at: support@zebrabi.com or via regular post addressed to our Registered seat: ZEBRA BI d.d., Pot za Brdom 104, 1000 Ljubljana, Slovenia with the annotation “Protection of Personal Data”.
- User
The “User” of our website, Custom Visual or Application is any person who uses the website https://zebrabi.com/ or https://zebra-ai.com and any of the associated websites of Zebra BI d.d. as a visitor or uses Custom Visuals developed by Zebra and published on Microsoft AppSourse or Privately distributed or uses the Application.
- Information we collect when you use the website and the Application
Personal data is any data that can be used to directly or indirectly identify an individual. A natural person is identifiable directly or indirectly, in particular by providing an identifier, such as name, identification number, location data, web identifier, or by specifying one or more factors specific to the natural person. Depending on the circumstances of each case, we may collect and process the following personal data:
- contact details and information about our customers (e.g. name and surname, address, e-mail address, telephone and mobile number, your job and function and the name of your employer, sector in which you work, date, time and content of postal or electronic communication);
- data on Users of the Controller’s Website (e.g. IP address, dates, hours and duration of Website visits, data on the location or entry point of Internet access, data on visited sub-pages, data on the settings made, etc.);
- information on entries in online forms (e.g. subscribing to the newsletter or filling out a registration / contact form);
- data of potential candidates for employment, which potential candidates send to our contact details;
- other data that you voluntarily provide to us at any of the contact addresses on our Website or which we process due to our business or contractual relationship with you.
- Information we collect when you use the custom visual
Apart from the user information content you voluntarily share by signing up or authenticating via a 3rd Party Authentication Provider, no other information is collected or aggregated in Custom Visual and transmitted to our servers. We do not log any actions, events, or data being managed or visualized within Custom Visual involuntarily.
- Personal data to which you are the controller
Please note that the Custom Visual and Application themselves are generally not intended for entering any personal data to which you are the data controller but rather just for entering Your Content (as defined in the Terms of Service published on our website or attached to this Policy) which usually does not contain personal data. In case you nevertheless enter any personal data in the Custom Visual or the Application, you are responsible for the compliance with the relevant personal data protection legislation, including the requirement to have a legal basis for such processing, data protection requirements and similar. We do not take responsibility for any such personal data entered into Custom Visual or the Application.
- Security of your data
We are committed to protecting the data you share with us. Zebra uses a combination of industry-standard security technologies, procedures, and organizational measures to help protect your data from unauthorized access, use, or disclosure. Company supports online security using secure server technology because we want your data to be safe. We bind our employees and data processors to observe your privacy and confidentiality rights.
- Legal basis for processing
We collect and process personal data for the purpose of fulfilling contractual obligations pursuant to Article 6(1), lit. b GDPR or under the equivalent article under other national laws, when applicable. Processing when necessary to fulfill contractual obligations includes processing the personal data of the contracting parties (e.g. employment contracts, employment contracts, company contracts, sales contracts, etc.) and possibly collecting and processing personal data of external contractual collaborators. Personal data required for the fulfillment of contractual obligations (in particular data on date of birth, gender, tax number, contact details, residence data, transaction account data, profession, education, registration number, data on submitted personal documents, and other submitted documents or those personal data necessary for the purpose of the legal relationship) is collected exclusively to the minimum extent permitted for the individual purpose. The stated data is also collected and processed in the phase of concluding agreements, negotiations, responding to your related inquiries, processing your feedback, or providing you with support. We keep several records of personal data processing activities, which show the types of personal data, the purposes of their processing, the basis for collection and processing, retention periods, access to data, etc.
We collect and process personal data in order to ensure compliance. Our products, technologies, and services are subject to export laws of various countries including, without limitation, those of the European Union and its member states, and of the United States of America. You acknowledge that pursuant to the applicable export laws, trade sanctions, and embargoes issued by these countries, we are required to take measures to prevent entities, organizations, and parties listed on government-issued sanctioned-party lists from accessing certain products, technologies, and services through our website or other delivery channels controlled by us. This could include (i) automated checks of any User registration data as set out herein and other information a User provides about his or her identity against applicable sanctioned-party lists; (ii) regular repetition of such checks whenever a sanctioned-party list is updated or when a User updates his or her information; (iii) blocking of access to SAP’s services and systems in case of a potential match; and (iv) contacting a User to confirm his or her identity in case of a potential match. Any such use of your personal data is based on the permission to process personal data in order to comply with statutory obligations (Article 6 para. 1 lit. c GDPR or the equivalent articles under other national laws, when applicable) and our legitimate interest (Article 6 para. 1 lit. f GDPR or the equivalent articles under other national laws, when applicable).
We collect and process personal data based on our legitimate interest pursuant to Article 6 para. 1 lit. f GDPR or the equivalent article under other national laws, when applicable, such as for the purpose of preventing or prosecuting criminal activities (e.g. fraud and to assert or defend against legal claims). When processing personal data based on our legitimate interest, we always weigh the interests of individuals for such processing and our interests as Controllers to determine, whether the interests and fundamental rights of individuals prevail over our interests, to which personal data relate and which require the protection of personal data. In particular, during processing, we respect the principle of minimum data use, whereas personal data has to be relevant and limited to what is necessary for the purposes for which they are processed.
- Processing based on consent
We also collect and process personal data, if you granted prior consent of your personal data in accordance with Article 6(1) lit. a GDPR or the equivalent article under other national laws, when applicable. Processing based on the consent of individuals is conducted for the purpose of direct marketing of our services and products, e.g. for informing about novelties of our services and products, responding to your related inquiries, processing your feedback, or providing you with support via e-mail, telephone or regular mail.
You may at any time withdraw consent granted hereunder by “unsubscribing”. In case of withdrawal, we will not process personal data subject to this consent any longer unless legally required to do so. In case we are required to retain your personal data for legal reasons, your personal data will be restricted from further processing and only retained for the term required by law. However, any withdrawal has no effect on the past processing of personal data by us up to the point in time of your withdrawal. Furthermore, if your use of our offering requires your prior consent, we will not be able to provide the relevant service or offer to you after your revocation. For more information regarding the processing of personal data based on consent, you may contact our contact center for personal data protection that can be reached via the e-mail address at: support@zebrabi.com or via regular post addressed to our Registered seat: ZEBRA BI d.d., Pot za Brdom 104, 1000 Ljubljana, Slovenia with the annotation “Protection of Personal Data”.
- Processors and users of personal data
In addition to ZEBRA, the personal data of individuals is also processed by external processors, in particular accounting. In such events, we have concluded an appropriate written agreement on the processing of personal data or a similar agreement in terms of content. We provide personal data to other users of personal data if so required under applicable legislation if there is a legitimate interest or if we have the consent of the individual.
We do not transfer the collected personal data to third countries. In the event that we have transferred the personal data of an individual to third countries, we will ensure the provision and implementation of appropriate measures to ensure the security of personal data and the fundamental rights and freedoms of individuals, in accordance with applicable legislation.
- Data protection rights
An individual may address a written request to the contact center for personal data protection that can be reached via the e-mail address at: support@zebrabi.com or via regular post addressed to our Registered seat: ZEBRA BI d.d., Pot za Brdom 104, 1000 Ljubljana, Slovenia with the annotation “Protection of Personal Data”, to provide the following information regarding the collection and processing of personal data, namely the individual has the following rights:
- the right to be informed about the processing of personal data;
- the right to access their personal data collected and processed by us, according to which an individual can obtain a confirmation of whether personal data is processed and, if so, the right to access and receive additional information (on processing purposes, data types, data sources, data users, the existence of his rights, the possibility of appeal, the existence of automated decision-making), as well as copies of personal data;
- the right to correct incorrect personal data;
- the right to restrict the processing of personal data;
- the right to delete personal data, if the prescribed conditions are met (processing is no longer necessary, revocation of consent in the absence of another legal basis for processing, if justified objection when the processing of personal data has been unlawful and if the erasure is required under applicable legislation, etc.);
- the right of transferability, meaning the right of an individual to receive all personal data information relating to him or her, which the ZEBRA has at its disposal as a Collector, in a structured, widely used and machine-readable form and the right to pass this information on to another Controller (applies to data, collected by the Controller in an automated process, and based on either consent or contractual relationship);
- the right to object, which means that an individual can oppose certain grounds or purposes processing is objected to (public interests, legitimate interests, marketing) and the Collector must demonstrate legitimate interests for continued or discontinued processing.
We will provide the individual with the requested information upon written request without undue delay and in any case within 1 (one) month of receiving the request. This period may be extended, if necessary, by a maximum of 2 (two) additional months, taking into account the complexity and number of requirements. We shall notify the individual of such an extension within 1 (one) month of receiving the request, together with the reasons for the delay. The information provided in this way is provided to the individual free of charge. Where the individual’s requests are manifestly unfounded or excessive, in particular, because they are repeated, we may charge the individual a fee or refuse to act on the request.
- Personal data retention period
We will only retain your personal data for the needs in accordance with the conditions and for the purposes defined in this Privacy Policy. Personal data is stored on our website and in case of further processing and communication with the User in other databases of the Controller.
The retention period of personal data may vary depending on the applicable legislation (i.e. mandatory law). In the event that the applicable legislation sets mandatory time limits for the storage of personal data, we shall delete personal data after the expiry of the mandatory time limit prescribed by applicable legislation. We shall also delete, destroy, block or pseudonymize personal data after the purpose of processing has been fulfilled, unless the applicable legislation provides otherwise.
- Third party disclosure
Zebra is committed to ensuring that your identifiable and non-identifiable personal information is secure. We have put in place suitable physical, electronic and managerial procedures to prevent unauthorized access, modification, disclosure, or loss of your identifiable personal information. However, Zebra may disclose personally identifiable information under special circumstances, such as to comply with subpoenas when Users actions may violate this privacy policy and the Terms of Service. Additionally, we are not responsible for any breach of security or actions undertaken by any third parties that receive the information.
- Right to appeal to the supervisory authority
If you believe that your personal data is processed in contravention of applicable regulations governing the protection of personal data, you have the right to lodge a complaint with the competent state authority:
State Authority: Information Commissioner of the Republic of Slovenia
Address: Dunajska cesta 22, 1000 Ljubljana, Slovenia
Contact:
T: +386 1 230 97 30
- Cookies
ZEBRA’s websites https://zebrabi.com/ and https://zebra-ai.com/ use cookies in order to provide online services, advertising systems, and functionalities that they would not be able to provide without cookies. By visiting and using the website, the User of the website agrees to cookies, and expresses their consent by clicking on an empty field for a particular purpose of data processing.
A cookie is any information that a website sends to the User’s browser, which then stores it in the User’s system. A cookie allows a website to remember information about the User’s settings until the User closes the current browser window (if the cookie is temporary) or until the cookies are disabled or deleted. Cookies are essential to provide User-friendly online services. The most common e-commerce features would not be possible without cookies. The interaction between the User and the website is faster and easier with the help of cookies. With their help, the website remembers the individual’s preferences and experiences, which saves time and makes browsing the website more efficient.
If the User of the website wants to change the way cookies are used in the browser, including blocking or deleting, he can do so by changing the browser settings accordingly. Cookies stored by the browser can be deleted by the User. The process for managing and deleting cookies varies from browser to browser. The User can find more detailed information on how to delete cookies on the website of the browser he is using.
Our website uses the following cookies:
Necessary cookies
Help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
Duration: 13 months
Analytics cookies
These cookies help us to understand how visitors engage with the website. We may use a set of cookies to collect information and report site usage statistics. In addition to reporting site usage statistics, data collected may also be used, together with some of the advertising cookies described, to help show more relevant ads across the web and to measure interactions with the ads we show.
Duration: 13 months
Functionality cookies
We use a set of cookies that are optional for the website to function. They are usually only set in response to information provided to the website to personalize and optimize your experience as well as remember your chat history.
Duration: 13 months
Marketing cookies
We use cookies to make our ads more engaging and valuable to site visitors. Some common applications of cookies are to select advertising based on what is relevant to a User; to improve reporting on ad campaign performance, and to avoid showing ads the User has already seen.
Duration: 13 months
Zebra reserves the right, in its discretion, to change, modify, add to, or remove portions of this Privacy Policy (collectively, “Changes”), at any time. Zebra will notify you of Changes by posting a revised version of this Privacy Policy incorporating the Changes to its website, and, if you are a Custom Visual or Application User and we have your email address, also via e-mail. Your continued use of the website, Custom Visual or Application following notice of the Changes will mean that you accept and agree to the Changes. Such Changes will apply prospectively beginning on the date the Changes are posted to the website as set out in this point 16 (“last updated on”).
END OF PRIVACY POLICY